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AMENDMENT? TQTHE CLAIMS 

1. (Currently amended) A method for generating an encryption key for use with a 
host device having a host identification thft i? exclusive to said host device stored therein, for 
encrypting a file, which comprises a plurality of blocks of plaintext data^ in a manner that said 
encrypted file can only be decrypted by said host device, the method comprising: 

retrieving the host identification from the host device for use as a private portion of an 
encryption key exclusive to one and only one g*iH h/>«» H^v^- 

generating at least one content variable as a public portion of said encryption key, where said 
at least one content variable uniquely identifies a corresponding block of said file; 

combining the host identification and the at least one content variable to produce the 
encryption key, 

encrypting a block of plaintext data using the encryption key to produce a block of 

ciphertext thai can only be decrypted by said host device: 

appending only the at least one content variable to the block of ciphertext; and 

storing the block of ciphertext and the appended one or more content variable within a 

storage device. 

2. (Previously presented^ The encryption key generation method of claim 1 wherein 
said step of combining comprises; 

using a predetermined method, wherein combining the host identification and the at least 
one content variable repeatedly produces the same encryption key. 

3. (Previously presented) The encryption key generation method of claim 1, wherein 
the host device includes a secure clock, the method further comprising: 

obtaining a time variable from the secure clock within the host device; 
combining the host identification, the at least one content variable and the time variable to 
produce the encryption key. 
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4, (Currendy amended) A method for generating an encryption key to encrypt a 
block of plaintext for use with a host device having a secure clock and a host identification that is 
exclusive to said host device, assigned thereto and saved therein, the method comprising: 

retrieving the host identification from the host device for use as a private portion of an 
encryption tey exclusive to one and only one host device : 

generating a content identification, wherein the content identification corresponds to the 
block of plaintext as a public portion of said encryption key; 

obtaining a time variable from the secure clock within the host device; 

combining the host identification, the content identification and the time variable to 
produce the encryption key that is exclusive to one and only said host device . 

5, (Currently amended) A method for encrypting a block of plaintext for 
transmission over an unsecured interface to a storage device, for use with a host device having a 
host identification that is exclusive to said hosr device, assigned thereto and stored therein, the 
method comprising: 

retrieving the host identification from the host device for use as a private portion of an 
encryption bey exclusive to one and only one host device: 

generating at least one content variable as a public portion of said encryption key, where said 
at least one content variable uniquely identifies a corresponding block of said file; 

combining the host identification and the at least one content variable to produce an 
encryption key; 

encrypting the block of plaintext using the encryption key to produce a block of 
cipheitext that can only he decrypted bvsaid host device: 

appending the at least one content variable to the block of cipheitext; 

transmitting the block of cipheitext and the appended at least one content variable over the 
unsecured interface to the storage device; and 

storing the block of cipheitext and the appended one or more content variables within the 
storage device. 

6, (Previously presented) The method of encrypting the block of plaintext of claim 5, 
wherein the host device further comprises a secure clock, the method further comprising: 

obtaining a first time variable from the secure clock within the hose device; 
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combining the host identification, the at least one content variable and the first time variable 
to produce an encryption key. 

7. (Previously presented) The method of encrypting the block of plaintext of claim 6, 
for further use decrypting the block of ciphertext, the method comprising: 

retrieving the stored block of ciphertext and the appended at least one content variable from 
the storage device; 

retrieving the host identification from the host device; 

obtaining a second time variable from the secure dock within the host device; 

combining the host identification, the at least one content variable and the second time 
variable to produce a second encryption key, wherein if the first time variable and the second time 
variable do not match, the second encryption key will not decrypt the block of ciphertext and if the 
first time variable matches the second time variable the second encryption key will decipher the 
block of ciphertext* 

8. (Previously presented) The method of encrypting the block of plaintext of claim 5 
for further use decrypting the stored block of ciphertext, the method comprising: 

retrieving the stored block of ciphertext and the appended at least one content variable from 
the storage device; 

retrieving the host identification from the host device; 

combining die host idenrificarion and the at least one content variables to produce the 
encryption key that was used to encrypt the file; and 

decrypting the block of ciphertext with the encryption key to produce the block of plaintext* 

9. (Previously presented) The encryption key generation method of claim 3 further 
comprising: 

retrieving the stored block of ciphertext and the appended at least one content variable from 
the storage device; 

retrieving the host identification from the host device; 

obtaining a second time variable from the secure clock within the host device; 

combining the host idenrificarion, the at least one content variable, and the second time 
variable to produce a second encryption key; wherein if the first time variable and the second time 
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variable do not match, the second encryption key will not decrypt the block of ciphenext; and if the 
first time variable matches the second time variable, the second encryption key will decipher the 
block of ciphertext. 

10. (QinenrJfy amended) The encryption key generation method of claim 1 further 
comprising: 

retrieving the stored block of ciphertexc and the appended at least one content variable from 
the storage device; 

retrieving by the host device the host identif icarion from the host device; 

combining the host identification and the at least one content variable to produce the 
encryption key that was used to encrypt the file; and 

decrypting the block of ciphertext with the encryption key to produce the block of plaintext 

data. 

11- (Previously presented) The encryption key generation method of claim 5 wherein 
said step of combining comprises: 

using a predetermined method, wherein combining the host identification and the at least 
one content variable produces the same encryption toy each time the encryption key generation 
process is executed 
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